All Categories → Security → security-tools

Top 654 security-tools open source projects

Dashboard to collect, analyze, and respond to reported phishing emails.

✭ 251

python security security-tools infosec phishing security-automation

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures, audios, etc(for fun)files on Android. Capstone-based disassembler application on android. 안드로이드 NDK 공유 라이브러리, Windows 바이너리, etc,... 리버싱 앱

✭ 250

c assembly symbols android security-tools arm disassembler dll jni elf ndk disassembly capstone

Githubmonitor

根据关键字与 hosts 生成的关键词，利用 github 提供的 api，监控 git 泄漏。

✭ 248

python python3 security-tools email

Gg Shield Action

GitGuardian Shield GitHub Action - Find exposed credentials in your commits

✭ 248

dockerfile devops security-tools ci devsecops

Pcapviz

Visualize network topologies and collect graph statistics based on pcap files

✭ 247

python security-tools pcap

Findwebshell

findWebshell是一款基于python开发的webshell检测工具。

✭ 246

python security-tools webshell

Rengine

reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlation and organization, continuous monitoring, backed by a database, and simple yet intuitive User Interface. reNgine makes it easy for penetration testers to gather reconnaissance with…

Rhizobia p

PHP安全SDK及编码规范

✭ 244

security sdk security-tools

Strongbox

A secret manager for AWS

✭ 243

java aws serverless security-tools password secret-management

Cobra

Source Code Security Audit (源代码安全审计)

✭ 2,802

python CSS HTML javascript java PHP security-tools security-audit security-scanner cobra sourcecode-analysis code-audit

Ebpf

eBPF Utilities, Maps, and more

✭ 238

go linux security-tools tracing network-programming ebpf

Grapefruit

(WIP) Runtime Application Instruments for iOS. Previously Passionfruit

✭ 235

vue ios mobile security-tools mobile-security

Oblivion

Data leak checker & OSINT Tool

✭ 237

python gui security-tools data email opensource osint pentest cybersecurity password pyqt5 blueteam leak

Android Pin Bruteforce

Unlock an Android phone (or device) by bruteforcing the lockscreen PIN. Turn your Kali Nethunter phone into a bruteforce PIN cracker for Android devices! (no root, no adb)

✭ 217

shell android security security-tools kali-linux bruteforce android-security

Privacy.sexy

Open-source tool to enforce privacy & security best-practices on Windows and macOS, because privacy is sexy 🍑🍆

✭ 221

typescript macos vuejs security-tools privacy macosx domain-driven-design security-hardening privacy-protection cleanup windows10

Kubestriker

A Blazing fast Security Auditing tool for Kubernetes

✭ 213

python docker security kubernetes aws automation devops containers security-tools azure infosec security-audit

Fsf

File Scanning Framework

✭ 228

python security-tools yara

Shed

.NET runtime inspector

✭ 229

fsharp dotnet reverse-engineering security-tools malware-analysis

Cameradar

Cameradar hacks its way into RTSP videosurveillance cameras

✭ 2,775

go Dockerfile security hacking security-tools pentesting penetration-testing infosec hacking-tool rtsp netsec cctv cameras

Linux Exploit Suggester

Linux privilege escalation auditing tool

✭ 3,126

shell security-tools hacking-tool linux-kernel exploits kernel-exploitation linux-exploits privilege-escalation-exploits applicable-exploits published-exploits

Fingerprinter

CMS/LMS/Library etc Versions Fingerprinter

✭ 227

ruby cms security-tools fingerprinting

Progpilot

A static analysis tool for security

✭ 226

security-tools static-code-analysis vulnerability-scanners

Zbang

zBang is a risk assessment tool that detects potential privileged account threats

✭ 224

security-tools active-directory network-security

H1domains

HackerOne "in scope" domains

✭ 223

python security security-tools security-automation security-vulnerability

Insider

Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).

✭ 216

javascript go swift kotlin csharp android nodejs ios cli dotnet security-tools static-analysis maven security-scanner owasp security-automation android-security static-analyzer

Honggfuzz Rs

Fuzz your Rust code with Google-developed Honggfuzz !

✭ 222

rust security security-tools fuzzing fuzzer crates security-testing fuzz-testing

Deephack

PoC code from DEF CON 25 presentation

✭ 222

python machine-learning tensorflow keras ai security-tools proof-of-concept

Aaia

AWS Identity and Access Management Visualizer and Anomaly Finder

✭ 218

python security aws security-tools graph pentesting neo4j iam

Iot Pt

A Virtual environment for Pentesting IoT Devices

✭ 218

security-tools pentesting embedded hardware firmware radio

Werdlists

⌨️ Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases

✭ 216

html awesome-list open-source security-tools penetration-testing computer-science test-automation regular-expression threat-hunting environment-variables information-security dynamic-analysis

Awesome Java Security

Awesome Java Security Resources 🕶☕🔐

✭ 216

java security awesome awesome-list security-tools static-analysis security-testing

Mosl

Bash script to audit and fix macOS Catalina (10.15.x) security settings

✭ 215

shell bash macos security-tools

Blackhat Arsenal Tools

Official Black Hat Arsenal Security Tools Repository

✭ 2,639

hacking security-tools webapp hacking-tool security-scanner forensics blackhat arsenal ics-scada

Ladon

大型内网渗透扫描器&Cobalt Strike，Ladon8.9内置120个模块，包含信息收集/存活主机/端口扫描/服务识别/密码爆破/漏洞检测/漏洞利用。漏洞检测含MS17010/SMBGhost/Weblogic/ActiveMQ/Tomcat/Struts2，密码口令爆破(Mysql/Oracle/MSSQL)/FTP/SSH(Linux)/VNC/Windows(IPC/WMI/SMB/Netbios/LDAP/SmbHash/WmiHash/Winrm),远程执行命令(smbexec/wmiexe/psexec/atexec/sshexec/webshell),降权提权Runas、GetSystem，Poc/Exploit,支持Cobalt Strike 3.X-4.0

✭ 2,911

C#security hacking security-tools tools scanner exploit pentest password poc security-scanner brute-force portscan exp ladon ipscanner getshell netscan

Vulny Code Static Analysis

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

✭ 207

python hacktoberfest security-tools static-analysis vulnerabilities security-scanner audit

Limitrr

Light NodeJS rate limiting and response delaying using Redis - including Express middleware.

✭ 203

javascript nodejs security redis security-tools authorization promise expressjs ip brute-force light protection rate-limiter express-middleware rate

Bundler Audit

Patch-level verification for Bundler

✭ 2,393

ruby security security-tools security-audit bundler-audit patch-management dependency-checker ruby-advisory-db

Pwnback

Burp Extender plugin that generates a sitemap of a website using Wayback Machine

✭ 203

java security-tools osint information-retrieval burpsuite burp-extensions

Zbn

安全编排与自动化响应平台

✭ 201

python python3 security automation hacking security-tools tools security-automation hacker

Fdsploit

File Inclusion & Directory Traversal fuzzing, enumeration & exploitation tool.

✭ 199

python security hacking security-tools pentesting penetration-testing fuzzing exploitation enumeration owasp oscp web-security

Containerssh

ContainerSSH: Launch containers on demand

✭ 195

go docker security kubernetes containers security-tools ssh devsecops

Replica

Ghidra Analysis Enhancer 🐉

✭ 194

python automation reverse-engineering security-tools analysis security-audit malware-analysis binary disassembler decompiler binary-analysis disassembly

Awesome Bbht

A bash script that will automatically install a list of bug hunting tools that I find interesting for recon, exploitation, etc. (minus burp) For Ubuntu/Debain.

✭ 190

shell hacking security-tools penetration-testing bugbounty hacking-tool exploitation reconnaissance recon bug-bounty

Pypowershellxray

Python script to decode common encoded PowerShell scripts

✭ 192

python powershell shellcode security security-tools dfir forensics incident-response

Aws Auto Remediate

Open source application to instantly remediate common security issues through the use of AWS Config

✭ 191

python security aws serverless cloud security-tools lambda serverless-framework

Ansible Role Hardening

Ansible role to apply a security baseline. Systemd edition.

✭ 188

html security ansible security-tools ubuntu debian vagrant centos security-hardening hardening systemd information-security

Fudgec2

FudgeC2 - a command and control framework designed for team collaboration and post-exploitation activities.

✭ 191

python python3 powershell security security-tools cybersecurity redteam post-exploitation offensive-security

Revshellgen

Reverse shell generator written in Python 3.

✭ 190

python shell python3 security security-tools generator oscp reverse-shell reverse

Apk Medit

memory search and patch tool on debuggable apk without root & ndk

✭ 189

go android security-tools security-testing android-security

Security Scripts

A collection of security related Python and Bash shell scripts. Analyze hosts on generic security vulnerabilities. Wrapper around popular tools like nmap (portscanner), nikto (webscanner) and testssl.sh (SSL/TLS scanner)

✭ 188

python shell security security-tools ssl security-scanner nmap

Knary

A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams & Pushover support

✭ 187

go security-tools pentesting penetration-testing bugbounty discord-bot burpsuite ctf-tools offensive-security slackbot

Attack monitor

Endpoint detection & Malware analysis software

✭ 186

python security-tools malware-analysis sysmon

Awesome Shodan Queries

🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻

✭ 2,758

security awesome awesome-list iot hacking cloud security-tools pentesting penetration-testing infosec internet-of-things security-scanner shodan dorks network-infrastructure shodan-dorks

Rebel Framework

Advanced and easy to use penetration testing framework 💣🔎

✭ 183

python hacking reverse-engineering security-tools ctf malware-analysis reconnaissance vulnerability-scanners decoder kali-linux forensics trace vulnerability-detection decompiler mitm information-security vulnerability-assessment checksum

Crithit

Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures to cross-check vulnerabilities over multiple hosts.

✭ 182